Back

Air Côte d'Ivoire Confirms Cyberattack by INC Ransomware Group

Severity: High (Score: 70.5)

Sources: Scworld, Therecord.Media

Summary

Air Côte d'Ivoire has confirmed a cyberattack that occurred earlier in February 2026, attributed to the INC ransomware group. The attackers claimed to have stolen 208 GB of data and threatened to leak it by February 24, prompting the airline to take action to mitigate the impact on its information systems.

Key Entities

  • Ransomware (attack_type)
  • Air Côte D'Ivoire (company)
  • Air Cte D'Ivoire (company)
  • Envoy Air (company)
  • Iberia (company)
  • Qantas (company)
  • Côte D'Ivoire (country)
  • T1041 - Exfiltration Over C2 Channel (mitre_attack)
  • T1567 - Exfiltration Over Web Service (mitre_attack)
  • INC (ransomware_group)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed